CVE-2023-6129

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...

CVE-2023-6129

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.216 for Mac,Linux and 120.0.6099.216/217 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 120.0.6099.216 for Mac and...

Vulnerability in OpenSSL - POLY1305 MAC implementation corrupts vector registers on PowerPC

Issue summary : The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary : If an attacker can influence whether the POLY1305 MAC...

OpenSSL Vector Register Corruption Vulnerability (20240109)

OpenSSL is prone to a vector register corruption vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

Apple Mac OS X Security Update (HT214048)

Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Update (stable-channel-update-for-desktop-2024-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

The vulnerability of the AppleGraphicsControl component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleGraphicsControl component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

AZL-33358 CVE-2023-49558 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

UBUNTU-CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.199 for Mac,Linux and 120.0.6099.199/200 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 120.0.6099.199 for Mac and...

Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester

Summary There are multiple vulnerabilities in Open JDK Version 8, OpenJ9 used by Rational Functional Tester RFT. RFT has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-22067 DESCRIPTION: An unspecified vulnerability in Java SE related to the CORBA component could allow a remo...

The vulnerability of the AppleGraphicsControl component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleGraphicsControl component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the AppleGraphicsControl component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleGraphicsControl component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

PT-2023-9248 · Siemens · Ruggedcom Rst2228

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RST2228 versions prior to V5.9.0 RUGGEDCOM RST2228P versions prior to V5.9.0 Description: A vulnerability has been identified in the web server of the affected systems, which leaks the MACSEC key in clear text to a logged-in user...

CVE-2023-51102

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formWifiMacFilterSet...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which originates from a stack overflow vulnerability in the formWifiMacFilterSet method...

The SSH transport protocol with certain OpenSSH extensions found in OpenSSH before 9.6 and other products allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message) and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP) implemented by these extensions mishandles the handshake phase and mishandles use of sequence numbers. For example there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in [email protected] and (if CBC is used) the [email protected] MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT Dropbear through 2022.83 Ssh before 5.1.1 in Erlang/OTP PuTTY before 0.80 AsyncSSH before 2.14.2 golang.org/x/crypto before 0.17.0 libssh before 0.10.6 libssh2

...

The vulnerability of the Accounts component in operating systems macOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accounts component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-29487

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause a denial of service DoS via the Threat To Process Correlation threat prevention module. NOTE: Heimdal asserts this is not a valid vulnerability. Their DNS...